Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/IiiCdVNULJSfFKzFYZw4aimzL2g.cer
File: IiiCdVNULJSfFKzFYZw4aimzL2g.cer (raw, json)
Hash identifier: JTYtcVi0uNfsuvHzqhTV8jrw/Bny3TpgyxAz3OtZyHQ=
Subject key identifier: 22:28:82:75:53:54:2C:94:9F:14:AC:C5:61:9C:38:6A:29:B3:2F:68
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18FB807EEFFC9CB4202937CA5CD4E10C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5d/874e8a-3a16-4f5b-8f19-37ad0eebe19b/1/IiiCdVNULJSfFKzFYZw4aimzL2g.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5d/874e8a-3a16-4f5b-8f19-37ad0eebe19b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:42:43 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 203913
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:fb:80:7e:ef:fc:9c:b4:20:29:37:ca:5c:d4:e1:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:42:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2228827553542c949f14acc5619c386a29b32f68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:46:bf:69:84:51:3b:af:48:c7:6e:36:a5:b1:
58:fe:20:de:0d:cc:68:24:4c:51:d6:3c:d4:65:2e:
a5:8b:71:67:41:60:27:6d:9c:c7:c1:4f:97:fd:a3:
8d:06:4f:a1:f4:06:a0:46:05:02:15:46:2b:41:19:
20:5c:4e:5b:39:7c:9f:41:f1:ad:34:8b:9e:5b:2f:
a3:0d:9f:bb:58:ee:5a:cb:83:a1:e1:be:4d:60:8e:
46:de:58:79:e4:53:01:71:bd:bb:7d:c3:0c:b1:55:
db:38:c9:29:99:11:a8:17:72:95:b7:d0:97:53:f4:
2e:20:8a:0d:89:85:39:ff:77:6b:e6:c0:2b:ad:b8:
b5:11:72:05:7f:19:90:3e:f4:11:6c:5e:2a:ba:8e:
0e:9c:1a:b0:46:a9:48:9f:26:94:bc:5e:30:73:11:
03:89:4f:fd:cf:65:f9:69:9a:17:98:68:5a:96:4d:
d6:ce:6e:30:25:06:f1:78:9a:f6:66:0e:82:0d:d7:
50:73:04:9e:2e:28:3e:b3:df:b9:e9:a9:ba:2f:ca:
d9:04:3e:ed:81:5e:26:4c:ff:37:4c:ac:82:0c:18:
7b:2d:97:93:cb:e0:a2:b1:aa:c0:6a:1f:15:4f:ae:
45:5c:23:d0:28:05:69:cb:82:70:0e:68:1c:43:e3:
09:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:28:82:75:53:54:2C:94:9F:14:AC:C5:61:9C:38:6A:29:B3:2F:68
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/874e8a-3a16-4f5b-8f19-37ad0eebe19b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/874e8a-3a16-4f5b-8f19-37ad0eebe19b/1/IiiCdVNULJSfFKzFYZw4aimzL2g.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
203913
Signature Algorithm: sha256WithRSAEncryption
a6:a1:2a:9d:45:58:cf:70:53:21:1e:4c:46:95:05:c8:6f:f4:
dc:bb:79:cf:d5:aa:30:94:fa:e7:51:9e:95:c2:ef:87:36:37:
4f:e4:6b:7e:63:72:55:22:b6:f7:c3:be:0f:e4:ab:7d:b2:84:
d1:6a:2b:5b:ae:8f:0a:cb:5a:fd:fe:97:2a:4f:d6:65:a9:8e:
58:de:e7:87:03:a2:b0:29:86:75:ca:74:27:61:8c:f9:04:71:
e9:35:3d:6f:ce:9f:87:d6:41:81:0c:09:8c:5c:a3:38:0f:eb:
b6:56:3f:a0:22:8a:b2:81:87:eb:94:ff:76:8b:11:e6:f5:5a:
96:3f:cc:92:30:4e:4a:78:8f:fd:39:be:b1:66:ae:c3:fb:91:
f4:cd:c0:27:14:bc:34:e4:de:2a:08:f1:51:d5:cf:59:4b:70:
bd:85:49:20:3a:bc:e4:75:15:f0:ce:cd:e5:3e:c0:4c:49:ed:
3e:c6:4d:dd:6d:96:16:6f:7e:54:46:a3:d4:3b:79:82:b9:8f:
97:19:dc:77:47:e2:f8:ce:d9:7f:f6:2e:9a:f5:c1:1f:41:2e:
e4:aa:b8:c2:b4:1f:36:1c:0e:4b:bc:27:fe:9d:c9:7e:85:e0:
15:5e:74:0c:df:36:b1:78:9b:c8:30:a2:55:da:36:ba:4c:32:
78:c2:ac:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:54:11 2026 by rpki-client